$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.mft File: -X5yAn9yM2RVo2RT-ymx5Fta7UA.mft (raw, json) Hash identifier: K5MsoLfNZ1IphSghsbWNQ04rloxPpAoV+5DSz/UMP4w= Subject key identifier: C4:A6:13:3A:13:FE:23:5D:D7:89:61:21:D5:45:27:A8:54:E4:53:02 Authority key identifier: F9:7E:72:02:7F:72:33:64:55:A3:64:53:FB:29:B1:E4:5B:5A:ED:40 Certificate issuer: /CN=A91B7C1A/serialNumber=F97E72027F72336455A36453FB29B1E45B5AED40 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-X5yAn9yM2RVo2RT-ymx5Fta7UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.mft Manifest number: 67 Signing time: Sun 19 May 2024 07:49:51 +0000 Manifest this update: Sun 19 May 2024 07:49:51 +0000 Manifest next update: Sun 26 May 2024 07:49:50 +0000 Files and hashes: 1: -X5yAn9yM2RVo2RT-ymx5Fta7UA.crl (hash: Sxt8IMu5X1GsQHDqgs/3b1cmjIsEdg26drAICo+V22M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.crl rsync://rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-X5yAn9yM2RVo2RT-ymx5Fta7UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C1A/serialNumber=F97E72027F72336455A36453FB29B1E45B5AED40 Validity Not Before: May 19 07:49:51 2024 GMT Not After : May 26 07:49:50 2024 GMT Subject: CN=6649af1f-7ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:18:50:07:f2:2b:ab:5f:3e:54:e1:27:69: 4c:38:cf:21:cd:0c:b3:d9:e8:b7:a2:2e:1c:54:98: b6:1c:78:8d:0a:87:47:6d:ea:80:64:2e:4f:4e:39: 88:73:70:00:b0:22:38:2d:2c:f7:55:5c:e9:47:9e: 45:60:8a:4d:f5:bf:73:5c:0c:77:83:c3:9e:0b:66: ab:93:ef:86:d8:67:8d:e0:c5:7a:8e:b6:eb:3e:32: 1b:a6:a2:1d:28:67:58:5a:bd:6b:3e:df:fd:b7:ca: da:bd:a0:f9:43:eb:04:8c:e3:08:2e:30:f0:35:95: 73:05:9b:a1:86:6a:49:68:27:8c:72:9d:4a:98:27: 34:c9:e3:5c:97:e2:01:74:a4:1a:ad:53:a6:a7:81: 79:48:3f:71:f8:ba:bb:1d:9d:19:22:2a:b2:ac:ac: fd:a7:b7:c1:3e:5e:29:fe:0f:a9:75:0b:76:b1:2a: 11:b4:a4:07:71:b9:98:e3:45:5e:0b:36:b6:75:b0: cc:fe:f5:02:6d:27:de:3d:62:82:eb:3b:55:28:4d: 88:a1:14:4c:40:27:6d:0e:00:af:c9:9c:79:1e:f7: 50:72:81:bd:11:90:87:0f:97:b7:ef:0e:00:fe:9a: ba:0e:58:e9:f2:c9:0e:86:37:77:a3:5a:c0:6c:e4: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:13:3A:13:FE:23:5D:D7:89:61:21:D5:45:27:A8:54:E4:53:02 X509v3 Authority Key Identifier: keyid:F9:7E:72:02:7F:72:33:64:55:A3:64:53:FB:29:B1:E4:5B:5A:ED:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-X5yAn9yM2RVo2RT-ymx5Fta7UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C1A/1A3C6F0E927711EEA3944E0CC4F9AE02/-X5yAn9yM2RVo2RT-ymx5Fta7UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:d1:d9:58:97:ec:e2:23:4a:17:fc:d2:0d:90:7e:0a:01: e0:aa:32:c3:fa:eb:1e:b1:c5:9e:58:7c:5a:3c:f9:21:c8:3b: 17:c7:54:f3:f4:11:8b:7a:4e:36:8f:ed:ce:51:85:1b:72:94: cb:b4:d2:c6:9e:29:2a:ff:4e:ae:e6:d9:70:b2:93:d8:65:c8: 9e:15:c7:f0:45:43:50:09:41:9a:9d:bc:26:0d:08:7b:dd:7c: f0:e7:a5:50:c6:f4:90:4c:d8:d2:5f:94:c9:a3:63:5d:0c:c2: f1:41:f7:cc:bc:a3:94:7e:7a:aa:91:c7:76:23:96:37:20:98: 5b:10:f8:d6:7e:8c:85:7e:84:b9:2f:e2:20:19:c6:0e:da:5b: 92:fd:61:cb:a4:36:8d:ef:0f:c9:7e:7d:c4:00:c2:44:12:db: 05:19:a7:82:51:36:1d:f8:a6:cf:30:c9:37:f2:fb:cd:94:96: f4:e9:82:d5:03:6d:2d:fa:25:68:1a:66:58:0c:ae:f4:27:a8: 10:d7:0a:9c:2e:f3:69:1d:26:db:99:e9:25:19:cc:48:98:e7: 74:0b:e8:13:0f:29:d1:41:9a:4c:c6:bf:97:79:a7:4f:cb:61: 23:d9:9b:49:80:3b:aa:3f:88:39:c9:30:e3:e6:23:fe:85:2f: 00:51:d9:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0MxQTExMC8GA1UEBRMoRjk3RTcyMDI3RjcyMzM2NDU1QTM2NDUzRkIyOUIxRTQ1 QjVBRUQ0MDAeFw0yNDA1MTkwNzQ5NTFaFw0yNDA1MjYwNzQ5NTBaMBgxFjAUBgNV BAMTDTY2NDlhZjFmLTdmZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyLBhQB/Irq18+VOEnaUw4zyHNDLPZ6LeiLhxUmLYceI0Kh0dt6oBkLk9OOYhz cACwIjgtLPdVXOlHnkVgik31v3NcDHeDw54LZquT74bYZ43gxXqOtus+Mhumoh0o Z1havWs+3/23ytq9oPlD6wSM4wguMPA1lXMFm6GGakloJ4xynUqYJzTJ41yX4gF0 pBqtU6angXlIP3H4ursdnRkiKrKsrP2nt8E+Xin+D6l1C3axKhG0pAdxuZjjRV4L NrZ1sMz+9QJtJ949YoLrO1UoTYihFExAJ20OAK/JnHke91Bygb0RkIcPl7fvDgD+ mroOWOnyyQ6GN3ejWsBs5KqjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxKYTOhP+ I13XiWEh1UUnqFTkUwIwHwYDVR0jBBgwFoAU+X5yAn9yM2RVo2RT+ymx5Fta7UAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3QzFBLzFBM0M2RjBFOTI3 NzExRUVBMzk0NEUwQ0M0RjlBRTAyLy1YNXlBbjl5TTJSVm8yUlQteW14NUZ0YTdV QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVg1eUFuOXlNMlJWbzJSVC15bXg1RnRhN1VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 QzFBLzFBM0M2RjBFOTI3NzExRUVBMzk0NEUwQ0M0RjlBRTAyLy1YNXlBbjl5TTJS Vm8yUlQteW14NUZ0YTdVQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxg0dlYl+ziI0oX/NINkH4KAeCqMsP66x6xxZ5YfFo8+SHIOxfHVPP0 EYt6TjaP7c5RhRtylMu00saeKSr/Tq7m2XCyk9hlyJ4Vx/BFQ1AJQZqdvCYNCHvd fPDnpVDG9JBM2NJflMmjY10MwvFB98y8o5R+eqqRx3YjljcgmFsQ+NZ+jIV+hLkv 4iAZxg7aW5L9YcukNo3vD8l+fcQAwkQS2wUZp4JRNh34ps8wyTfy+82UlvTpgtUD bS36JWgaZlgMrvQnqBDXCpwu82kdJtuZ6SUZzEiY53QL6BMPKdFBmkzGv5d5p0/L YSPZm0mAO6o/iDnJMOPmI/6FLwBR2fc= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org